Privacy Policy

Data Controller

• Controller: Xucavi
• Address: Stanisława Wyspiańskiego 43, Poznań, Poland
• Email: [email protected]
• Phone: +48 61 842 7487

Data We Collect and Why

• Contact enquiries: name, email address, and message content submitted via the contact form. Legal basis: Article 6(1)(b) GDPR (steps prior to entering a contract) and Article 6(1)(a) GDPR (consent given via the privacy checkbox).
• Email correspondence: email address and message content when you write to us directly. Legal basis: Article 6(1)(f) GDPR (legitimate interest in responding to communications).
• Technical data: IP address, browser type, pages visited, and approximate location via server logs. Legal basis: Article 6(1)(f) GDPR (legitimate interest in maintaining website security and performance). This data is not linked to individual identities unless required for security investigation.
• Cookie data: as described in our Cookie Policy. Legal basis varies by cookie category; see the Cookie Policy for detail.

How We Use Your Data

• Responding to enquiries submitted through the contact form or by email
• Providing information about coaching programs and webinars where requested
• Maintaining the technical security and functionality of this website
• Complying with legal obligations applicable to our operations in Poland

We do not use personal data for automated decision-making or profiling. We do not sell, rent, or share personal data with third parties for their own marketing purposes.

Data Retention

• Contact form submissions and email correspondence: retained for up to 24 months from the date of last contact, unless a longer retention period is required by law or the data is needed to fulfill a contractual relationship.
• Technical server logs: retained for up to 90 days.
• Cookie preference records: retained for up to 12 months from the date of consent.

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Article 15 GDPR): you may request a copy of the personal data we hold about you.
• Right to rectification (Article 16 GDPR): you may request correction of inaccurate data.
• Right to erasure (Article 17 GDPR): you may request deletion of your data where no legal basis for continued processing exists.
• Right to restriction of processing (Article 18 GDPR): you may request that we limit how we use your data in certain circumstances.
• Right to data portability (Article 20 GDPR): where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object (Article 21 GDPR): you may object to processing based on legitimate interest.
• Right to withdraw consent (Article 7(3) GDPR): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: uodo.gov.pl.

International Transfers

We do not routinely transfer personal data outside the European Economic Area. If any transfer occurs, it will be subject to appropriate safeguards in accordance with Chapter V of the GDPR.

Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly. No internet transmission is completely secure; we cannot guarantee absolute security of data transmitted to this website.

Third-Party Services

This website may use Google Maps (embedded map on the contact page). Google's privacy policy applies to data processed through that service. We do not otherwise embed third-party tracking scripts that process personal data without your consent.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of this website after a change constitutes acceptance of the updated policy. For significant changes, we will make the update visible on this page.